The FortiClient application can obtain its VPN settings from the FortiGate VPN server. Automatic configuration of FortiClient dialup clients If configured, the FortiGate unit could also require FortiClient registration, that is, the remote user would be required to have FortiClient installed before connection is completed. The IPsec tunnel is established if authentication is successful and the IPsec security policy associated with the tunnel permits access. When the FortiGate unit acts as a dialup server, it does not identify the client using the Phase 1 remote gateway address. The FortiClient application can establish an IPsec tunnel with a FortiGate unit configured to act as a dialup server. Example FortiClient dialup-client configuration Peer identification See Automatic configuration of FortiClient dialup clients on page 131. It also uses this interface to download VPN settings from the FortiGate unit. The FortiClient application sends its encrypted packets to the VPN remote gateway, which is usually the public interface of the FortiGate unit.

For the duration of the connection, the FortiClient application and the FortiGate unit both use the VIP address as the IP address of the FortiClient dialup client. The FortiClient application also can be configured to use a virtual IP address (VIP). The NAT device must be NAT traversal (NAT-T) compatible to pass encrypted packets (see Phase 1 parameters on page 52). If the host is behind a NAT device, such as a router, the IP address is a private IP address. If the host connects directly to the Internet, this is a public IP address. Then, the FortiClient Endpoint Security application initiates a connection to a FortiGate dialup server.īy default the FortiClient dialup client has the same IP address as the host PC on which it runs. The following topics are included in this section:ĭialup users typically obtain dynamic IP addresses from an ISP through Dynamic Host Configuration Protocol (DHCP) or Point-to-Point Protocol over Ethernet (PPPoE). For example, the users might be employees who connect to the office network while traveling or from their homes.įor greatest ease of use, the FortiClient application can download the VPN settings from the FortiGate unit to configure itself automatically. This section explains how to configure dialup VPN connections between a FortiGate unit and one or more FortiClient Endpoint Security applications.įortiClient users are usually mobile or remote users who need to connect to a private network behind a FortiGate unit. The FortiClient Endpoint Security application is an IPsec VPN client with antivirus, antispam and firewall capabilities.

Download fortinet vpn client